pe.h File Reference

#include "compat.h"
#include <pshpack1.h>
#include <poppack.h>

Include dependency graph for pe.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	_CoffSymbol
struct	_Pe
struct	SYMENT

Macros
#define	E_SYMNMLEN   8
#define	C_EXT   2
#define	C_STAT   3
#define	DT_FCN   0x40
#define	ANSI_NAME_STRING(s)   ((PANSI_STRING)((s)->Name))

Typedefs
typedef struct _IMAGE_SECTION_HEADER	PeSect
typedef struct _CoffSymbol	CoffSymbol
typedef struct _Pe	Pe
typedef struct SYMENT *	PSYMENT

Functions
Pe *	peopen (const char *name)
int	loaddisksection (struct _Pe *pe, char *name, struct DwarfBlock *b)
int	loadmemsection (struct _Pe *pe, char *name, struct DwarfBlock *b)
u16int	peget2 (const unsigned char *ptr)
u32int	peget4 (const unsigned char *ptr)
u64int	peget8 (const unsigned char *ptr)
void	pefree (struct _Pe *pe)
ulong	pefindrva (struct _IMAGE_SECTION_HEADER *SectionHeader, int NumberOfSections, ulong TargetPhysical)
int	GetStrnlen (const char *string, int maxlen)

Macro Definition Documentation

ANSI_NAME_STRING

#define ANSI_NAME_STRING

(

s

)

((PANSI_STRING)((s)->Name))

Definition at line 59 of file pe.h.

C_EXT

#define C_EXT   2

Definition at line 45 of file pe.h.

C_STAT

#define C_STAT   3

Definition at line 46 of file pe.h.

DT_FCN

#define DT_FCN   0x40

Definition at line 47 of file pe.h.

E_SYMNMLEN

#define E_SYMNMLEN   8

Definition at line 27 of file pe.h.

Typedef Documentation

CoffSymbol

typedef struct _CoffSymbol CoffSymbol

Pe

typedef struct _Pe Pe

PeSect

typedef struct _IMAGE_SECTION_HEADER PeSect

Definition at line 7 of file pe.h.

PSYMENT

typedef struct SYMENT * PSYMENT

Function Documentation

GetStrnlen()

int GetStrnlen	(	const char *	string,
		int	maxlen
	)

Definition at line 103 of file pe.c.

                                               {
    int i;
    for (i = 0; i < maxlen && string[i]; i++);
    return i;
}

loaddisksection()

int loaddisksection	(	struct _Pe *	pe,
		char *	name,
		struct DwarfBlock *	b
	)

Definition at line 72 of file pe.c.

{
    PeSect *s;
    if((s = pesection(pe, name)) == nil)
        return -1;
    return readblock(pe->fd, b, s->PointerToRawData, s->SizeOfRawData);
}

loadmemsection()

int loadmemsection	(	struct _Pe *	pe,
		char *	name,
		struct DwarfBlock *	b
	)

Definition at line 81 of file pe.c.

{
    PeSect *s;
 
    if((s = pesection(pe, name)) == nil)
        return -1;
    DPRINT("Loading section %s (ImageBase %x RVA %x)\n", name, pe->fd, s->VirtualAddress);
    b->data = RosSymAllocMem(s->SizeOfRawData);
    b->len = s->SizeOfRawData;
    PCHAR DataSource = ((char *)pe->fd) + s->VirtualAddress;
    DPRINT("Copying to %x from %x (%x)\n", DataSource, b->data, b->len);
    RtlCopyMemory(b->data, DataSource, s->SizeOfRawData);
 
    return s->SizeOfRawData;
}

Referenced by RosSymCreateFromMem().

pefindrva()

ulong pefindrva	(	struct _IMAGE_SECTION_HEADER *	SectionHeader,
		int	NumberOfSections,
		ulong	TargetPhysical
	)

Definition at line 126 of file pe.c.

                                                                                                          {
    int i;
    DPRINT("Finding RVA for Physical %x\n", TargetPhysical);
    for (i = 0; i < NumberOfSections; i++) {
        DPRINT("Section %d name %s Raw %x Virt %x\n",
               i,
               ANSI_NAME_STRING(&SectionHeaders[i])->Buffer,
               SectionHeaders[i].PointerToRawData,
               SectionHeaders[i].VirtualAddress);
        if (TargetPhysical >= SectionHeaders[i].PointerToRawData &&
            TargetPhysical < SectionHeaders[i].PointerToRawData + SectionHeaders[i].SizeOfRawData) {
            DPRINT("RVA %x\n", TargetPhysical - SectionHeaders[i].PointerToRawData + SectionHeaders[i].VirtualAddress);
            return TargetPhysical - SectionHeaders[i].PointerToRawData + SectionHeaders[i].VirtualAddress;
        }
    }
    return nil;
}

pefree()

void pefree

(

struct _Pe *

pe

)

Definition at line 109 of file pe.c.

                    {
    int i;
    for (i = 0; i < pe->nsections; i++) {
        RtlFreeAnsiString(ANSI_NAME_STRING(&pe->sect[i]));
    }
    for (i = 0; i < pe->nsymbols; i++) {
        free(pe->symtab[i].name);
    }
    free(pe->symtab);
    free(pe->sect);
    free(pe);
}

peget2()

u16int peget2

(

const unsigned char *

ptr

)

Definition at line 35 of file pe.c.

                                        {
    return *((u16int*)ptr);
}

peget4()

u32int peget4

(

const unsigned char *

ptr

)

Definition at line 39 of file pe.c.

                                        {
    return *((u32int*)ptr);
}

peget8()

u64int peget8

(

const unsigned char *

ptr

)

Definition at line 43 of file pe.c.

                                        {
    return *((u64int*)ptr);
}

peopen()

Pe * peopen

(

const char *

name

)

Referenced by main().